ResearchBib Share Your Research, Maximize Your Social Impacts
Sign for Notice Everyday Sign up >> Login

RIHT: A Novel Hybrid IP Traceback Scheme?

Journal: International Journal of Computer Science and Mobile Computing - IJCSMC (Vol.3, No. 9)

Publication Date:

Authors : ; ;

Page : 324-331

Keywords : ;

Source : Downloadexternal Find it from : Google Scholarexternal

Abstract

Because the Internet has been widely applied in various fields, more and more network protection issues emerge and catch people’s attention. Though, adversaries often hide themselves by spoofing their own IP addresses and then launch attacks. For this reason, researchers have planned a lot of traceback schemes to trace the source of these attacks. Various use only one packet in their packet logging schemes to achieve IP tracking. Others unite packet marking with packet logging and therefore create hybrid IP traceback schemes demanding less storage but requiring a longer search. In this paper, we suggest a new hybrid IP traceback scheme with efficient packet logging aiming to have a fixed storage requirement for each router (under 320 KB, according to CAIDA’s skitter data set) in packet logging without the need to refresh the logged tracking information and to achieve zero false positive and false negative rates in attack-path reconstruction. In addition, we utilize a packet’s marking field to censor attack traffic on its upstream routers. Finally, we simulate and analyze our scheme, in evaluation with other related research, in the following aspects: computation, storage requirement, and accuracy.

Last modified: 2014-09-22 17:57:22